CNNVD-202512-4750 Information
CNNVD ID
CNNVD-202512-4750
Related CVE
- CNNVD Published: 2025-12-24
Description (Chinese)
Code-Projects Student Information System是Code-Projects开源的一个学生信息系统。 Code-Projects Student Information System 1.0版本存在代码注入漏洞，该漏洞源于对文件/profile.php中参数firstname/lastname的错误操作，可能导致跨站脚本攻击。
Description (English)
Code-Projects Studies Information System (System) is an open-source student information system for Code-Projects. The Code-ProjectStudent Information System Version 1.0 contains a code-injection loophole that results from an error in the parameter Firstname/lastname in the file/profile.php, which may result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
Code-Projects
Published
2025-12-24
Last Modified
2026-02-24
References
https://github.com/i4G5d/CRITICAL-SECURITY-VULNERABILITY-REPORT-Stored-XSS https://code-projects.org/ https://vuldb.com/?submit.720765 https://vuldb.com/?id.337858 https://vuldb.com/?ctiid.337858 https://access.redhat.com/security/cve/cve-2025-15052
Share on: